Marcus Meissner
3edd389fd8
New package efitools which contains the tools to generate the variables for UEFI Secure Boot The EFI binaries are removed to reduce the maintenance effort. We can add them back later if necessary. OBS-URL: https://build.opensuse.org/request/show/858304 OBS-URL: https://build.opensuse.org/package/show/Base:System/efitools?expand=0&rev=1
35 lines
1.1 KiB
Diff
35 lines
1.1 KiB
Diff
diff --git a/Make.rules b/Make.rules
|
|
index 903a5a4..bccabe7 100644
|
|
--- a/Make.rules
|
|
+++ b/Make.rules
|
|
@@ -1,4 +1,3 @@
|
|
-EFISIGNED = $(patsubst %.efi,%-signed.efi,$(EFIFILES))
|
|
MANPAGES = $(patsubst doc/%.1.in,doc/%.1,$(wildcard doc/*.1.in))
|
|
HELP2MAN = help2man
|
|
ARCH = $(shell uname -m | sed 's/i.86/ia32/;s/arm.*/arm/')
|
|
@@ -119,9 +118,6 @@ getvar = $(shell if [ "$(1)" = "PK" -o "$(1)" = "KEK" ]; then echo $(1); else ec
|
|
%-subkey.crt: %-subkey.csr KEK.crt
|
|
openssl x509 -req -in $< -CA DB.crt -CAkey DB.key -set_serial 1 -out $@ -days 365
|
|
|
|
-%-signed.efi: %.efi DB.crt
|
|
- sbsign --key DB.key --cert DB.crt --output $@ $<
|
|
-
|
|
##
|
|
# No need for KEK signing
|
|
##
|
|
diff --git a/Makefile b/Makefile
|
|
index 7d471da..79dc603 100644
|
|
--- a/Makefile
|
|
+++ b/Makefile
|
|
@@ -25,9 +25,7 @@ export TOPDIR := $(shell pwd)/
|
|
|
|
include Make.rules
|
|
|
|
-EFISIGNED = $(patsubst %.efi,%-signed.efi,$(EFIFILES))
|
|
-
|
|
-all: $(EFISIGNED) $(BINARIES) $(MANPAGES) noPK.auth $(KEYAUTH) \
|
|
+all: $(EFIFILES) $(BINARIES) $(MANPAGES) noPK.auth $(KEYAUTH) \
|
|
$(KEYUPDATEAUTH) $(KEYBLACKLISTAUTH) $(KEYHASHBLACKLISTAUTH)
|
|
|
|
|